[ Browser ]  Just released my @ Peach_Fuzzer pit for the HTTP/2 protocol targeting Microsoft Edge! https://github.com/sirusdv/EdgeHTTP2Fuzzer

[ Hardware ]  @ HackSysTeam Extreme Vulnerable Driver Python Solutions https://github.com/GradiusX/HEVD-Python-Solutions

[ MachineLearning ]  Awesome Machine Learning for Cyber Security https://github.com/jivoi/awesome-ml-for-cybersecurity

[ macOS ]  ipc_port_t reference count leak with nested MIG methods leads to OS X/iOS kernel UaF https://bugs.chromium.org/p/project-zero/issues/detail?id=926

[ macOS ]  macOS < 10.12.2 / iOS < 10.2 Kernel Mach Port Name uref Privilege Escalation https://cxsecurity.com/issue/WLB-2016120133

[ Malware ]  #PowerShell malware stealing credentials: https://twitter.com/JohnLaTwC/status/780111723176919040, http://pastebin.com/R8wqMKYP

[ MalwareAnalysis ]  Unit 42's review of regional malware trends in EMEA http://oak.ctx.ly/r/5buxh #Unit42

[ MalwareAnalysis ]  Symantec report on #PowerShell malware: https://www.symantec.com/content/dam/symantec/docs/security-center/white-papers/increased-use-of-powershell-in-attacks-16-en.pdf

[ MalwareAnalysis ]  Malware can use several mechanisms to avoid detection and analysis. We classify these techniques into 3 categories:… https://twitter.com/i/web/status/812162342494568448

[ Operating System ]  Published: AIX Bug Hunting Part 2 – Bellmail Privilege Escalation (CVE-2016-8972) https://rhinosecuritylabs.com/2016/12/21/unix-nostalgia-aix-bug-hunting-part-2-bellmail-privilege-escalation-cve-2016-8972/ PoC at: https://t.co/YbqDd6aQUh

[ Others ]  [RT-SA-2016-001] Padding Oracle in Apache mod_session_crypto https://goo.gl/fb/eD7HPn #FullDisclosure

[ Others ]  #Powershell threat targeting Brazil: https://twitter.com/JohnLaTwC/status/793163947356532736, http://pastebin.com/KiWD1juJ

[ Others ]  Some #PowerShell payloads I’ve seen in the wild: http://pastebin.com/juC4CkQG and http://pastebin.com/R75bqYkL

[ Others ]  [blog] Apache mod_rewrite Grab Bag — payload hot-swapping &amp; file ext obfuscation, 404 redirect, HTTP method blocking https://t.co/IRflwUjofh

[ Others ]  Bypassing CSP script nonces via the browser cache: http://sebastian-lekies.de/csp/attacker.php. Nonces are incompatible with most caching mechanisms. #CSP

[ Others ]  Basics of Making a Rootkit: from syscall to hook https://d0hnuts.com/2016/12/21/basics-of-making-a-rootkit-from-syscall-to-hook/

[ Others ]  Our #NDSS17 VUzzer paper on application-aware evolutionary fuzzing is now online: https://vusec.net/download/?t=papers/vuzzer_ndss17.pdf

[ Tools ]  Noriben - Portable, Simple, Malware Analysis Sandbox http://www.kitploit.com/2016/12/noriben-portable-simple-malware.html

[ Tools ]  To create JavaScript regular expressions that match a list of… …symbols, use https://github.com/mathiasbynens/regenerate …words, use https://t.co/crG7u70ZTM

[ Tools ]  Python JSON Fuzzer: https://github.com/mseclab/PyJFuzz

[ WirelessSecurity ]  Bluetooth Attacks on Commercial-Grade Electronic Locks - http://www.somersetrecon.com/blog/2016/10/14/electronic-safe-lock-analysis-part-2-

[ WirelessSecurity ]  How to get 3G working on the UmTRX https://fairwaves.co/blog/openbts-umts-3g-umtrx/ #3G #SDR #OpenBTS https://t.co/H0HXjZToWt